Business Analyst - GRC
Sign up free to see how well your resume matches this role.
What you'll do
- Own delivery of the GRC/TPRM workstream plan, RAID, scope, schedule, dependencies, and reporting
- Facilitate requirements gathering, process mapping and functional specification development
- Translate business needs into clear requirements and user stories for configuration and testing teams
- Coordinate solution design, build, testing (SIT/E2E/UAT), data migration and cutover activities
- Support change management, training coordination, and business readiness assessments
- Conduct impact assessments, identify gaps, and ensure quality sign-off across deliverables
- Confidently challenge stakeholders on scope and requirements, not just capture them at face value
What they're looking for
- Solid BA fundamentals requirements, RAID, process mapping, stakeholder management
- Confident running workshops with senior SMEs, both internal and external stakeholders
- Structured delivery experience (Waterfall, Agile or Hybrid)
- Proficiency with Smartsheet, Jira, Confluence, MS365 and process-mapping tools (Visio, Nintex, Visual Paradigm)
Nice to have
- Strong understanding of GRC, TPRM (Third-Party Risk Management) and/or CLM platforms strongly preferred
- Experience within financial services, fund administration or another regulated environment an advantage
- PMP, PRINCE2 or CBAP certification a plus
- HCM/ERP platform exposure a nice-to-have, not a requirement
Summarised by NextRaise from the employer’s description, which follows in full below.
Full description from employer
Morgan McKinley is working with a leading global financial services organisation to recruit a Contractor Business Analyst to step into a workstream lead role on a major multi-track transformation programme. The programme spans several parallel initiatives, including a new finance ERP solution, an in-flight HCM implementation, a Contract Management System, and a Third-Party Risk Management (GRC) solution, which is the primary focus of this role.
This is a classical BA role with genuine scope to grow into workstream ownership, developing the plan, tracking progress against it, and proactively flagging issues and risks as they emerge rather than waiting to be asked. You'll work closely with the Head of Third-Party Risk Management and her team, and sit across two closely-linked groupings: GRC and Finance Transformation.
Key Responsibilities
- Own delivery of the GRC/TPRM workstream plan, RAID, scope, schedule, dependencies, and reporting
- Facilitate requirements gathering, process mapping and functional specification development
- Translate business needs into clear requirements and user stories for configuration and testing teams
- Coordinate solution design, build, testing (SIT/E2E/UAT), data migration and cutover activities
- Support change management, training coordination, and business readiness assessments
- Conduct impact assessments, identify gaps, and ensure quality sign-off across deliverables
- Confidently challenge stakeholders on scope and requirements, not just capture them at face value
About You
- Solid BA fundamentals requirements, RAID, process mapping, stakeholder management
- Strong understanding of GRC, TPRM (Third-Party Risk Management) and/or CLM platforms strongly preferred
- Confident running workshops with senior SMEs, both internal and external stakeholders
- Experience within financial services, fund administration or another regulated environment an advantage
- Structured delivery experience (Waterfall, Agile or Hybrid)
- PMP, PRINCE2 or CBAP certification a plus
- Proficiency with Smartsheet, Jira, Confluence, MS365 and process-mapping tools (Visio, Nintex, Visual Paradigm)
- HCM/ERP platform exposure a nice-to-have, not a requirement
Company
Company facts come from this company's own listings. We only show what the postings themselves carry.